@cloud-copilot/iam-data 0.19.202605011 → 0.19.202605051

package/data/actions/application-signals-mcp.json

@@ -0,0 +1,32 @@
+{
+  "callreadonlytool": {
+    "name": "CallReadOnlyTool",
+    "description": "Grants permission to invoke read-only Application Signals MCP tools (list_monitored_services, get_service_detail, query_service_metrics, list_service_operations, get_slo, list_slos, search_transaction_spans, query_sampled_traces, list_slis, get_enablement_guide, list_change_events, list_group_services, audit_group_health, get_group_dependencies, get_group_changes, list_grouping_attribute_definitions, audit_services, audit_slos, audit_service_operations, analyze_canary_failures)",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mcp-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokemcp": {
+    "name": "InvokeMcp",
+    "description": "Grants permission to connect to and interact with the Application Signals MCP server (initialize, list tools, list resources, list prompts)",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "mcp-server",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  }
+}

package/data/actions/cloudwatch.json

@@ -22,6 +22,15 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "callwithbearertoken": {
+    "name": "CallWithBearerToken",
+    "isPermissionOnly": true,
+    "description": "Grants permission to make API calls to CloudWatch using bearer token authentication",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createservicelevelobjective": {
     "name": "CreateServiceLevelObjective",
     "description": "Grants permission to create a service level objective",
@@ -527,6 +536,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "insight-rule",
         "required": false,
@@ -561,6 +576,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dashboard",
+        "resourceTypes": [
+          {
+            "name": "dashboard",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -644,7 +668,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "putinsightrule": {
@@ -805,6 +832,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "insight-rule",
         "required": false,
@@ -842,6 +875,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dashboard",
+        "resourceTypes": [
+          {
+            "name": "dashboard",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [
@@ -879,6 +921,12 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "dashboard",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "insight-rule",
         "required": false,
@@ -915,6 +963,15 @@
           }
         ]
       },
+      {
+        "name": "CloudWatch-Dashboard",
+        "resourceTypes": [
+          {
+            "name": "dashboard",
+            "required": true
+          }
+        ]
+      },
       {
         "name": "CloudWatch-InsightRule",
         "resourceTypes": [

package/data/actions/redshift.json

@@ -83,11 +83,11 @@
   "authorizeinboundintegration": {
     "name": "AuthorizeInboundIntegration",
     "isPermissionOnly": true,
-    "description": "Grants permission to Amazon Redshift to continuously validate that the target data warehouse can receive data replicated from the source ARN",
+    "description": "Grants permission to Amazon Redshift to continuously validate that the target namespace can receive data replicated from the source ARN",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "integration",
+        "name": "namespace",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
@@ -402,9 +402,16 @@
   "createinboundintegration": {
     "name": "CreateInboundIntegration",
     "isPermissionOnly": true,
-    "description": "Grants permission to the source principal to create an inbound integration for data to be replicated from the source into the target data warehouse",
+    "description": "Grants permission to the source principal to create an integration into the namespace of target data warehouse",
     "accessLevel": "Write",
-    "resourceTypes": [],
+    "resourceTypes": [
+      {
+        "name": "namespace",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
     "conditionKeys": [],
     "dependentActions": []
   },

package/data/actions/securityhub.json

@@ -779,6 +779,21 @@
     ],
     "dependentActions": []
   },
+  "generaterecommendedpolicyv2": {
+    "name": "GenerateRecommendedPolicyV2",
+    "description": "Grants permission to generate policy recommendations for an OCSF finding",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getadhocinsightresults": {
     "name": "GetAdhocInsightResults",
     "isPermissionOnly": true,
@@ -1104,6 +1119,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getrecommendedpolicyv2": {
+    "name": "GetRecommendedPolicyV2",
+    "description": "Grants permission to retrieve policy recommendations for an OCSF finding",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getresourcesstatisticsv2": {
     "name": "GetResourcesStatisticsV2",
     "description": "Grants permission to retrieve aggregate statistics about resources",
@@ -1175,6 +1205,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getusagev2": {
+    "name": "GetUsageV2",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve information about Security Hub usage for an account",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invitemembers": {
     "name": "InviteMembers",
     "description": "Grants permission to invite other AWS accounts to become Security Hub member accounts",
@@ -1190,6 +1236,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listaccountusagev2": {
+    "name": "ListAccountUsageV2",
+    "isPermissionOnly": true,
+    "description": "Grants permission to retrieve a list of Security Hub usage for accounts in an organization",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "hubv2",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listaggregatorsv2": {
     "name": "ListAggregatorsV2",
     "description": "Grants permission to retrieve a list of aggregatorsV2, which configures data aggregation across Regions",

package/data/conditionKeys/application-signals-mcp.json

@@ -0,0 +1,7 @@
+{
+  "aws:resourcetag/${tagkey}": {
+    "key": "aws:ResourceTag/${TagKey}",
+    "description": "Filters access by tag key-value pairs attached to the resource",
+    "type": "String"
+  }
+}

package/data/resourceTypes/aidevops.json

@@ -8,7 +8,7 @@
   },
   "associations": {
     "key": "associations",
-    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/associations/${AssociationId}"
+    "arn": "arn:${Partition}:aidevops:${Region}:${Account}:agentspace/${AgentSpaceId}/association/${AssociationId}"
   },
   "private-connection": {
     "key": "private-connection",

package/data/resourceTypes/application-signals-mcp.json

@@ -0,0 +1,9 @@
+{
+  "mcp-server": {
+    "key": "mcp-server",
+    "arn": "arn:${Partition}:application-signals-mcp:${Region}:${Account}:mcp-server/*",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
+  }
+}

package/data/resourceTypes/cloudwatch.json

@@ -15,7 +15,10 @@
   },
   "dashboard": {
     "key": "dashboard",
-    "arn": "arn:${Partition}:cloudwatch::${Account}:dashboard/${DashboardName}"
+    "arn": "arn:${Partition}:cloudwatch::${Account}:dashboard/${DashboardName}",
+    "conditionKeys": [
+      "aws:ResourceTag/${TagKey}"
+    ]
   },
   "insight-rule": {
     "key": "insight-rule",

package/data/serviceNames.json

@@ -24,6 +24,7 @@
   "appflow": "Amazon AppFlow",
   "application-autoscaling": "AWS Application Auto Scaling",
   "application-signals": "Amazon CloudWatch Application Signals",
+  "application-signals-mcp": "Amazon CloudWatch Application Signals MCP Server",
   "application-transformation": "AWS Application Transformation Service",
   "applicationinsights": "Amazon CloudWatch Application Insights",
   "appmesh": "AWS App Mesh",

package/data/services.json

@@ -24,6 +24,7 @@
   "appflow",
   "application-autoscaling",
   "application-signals",
+  "application-signals-mcp",
   "application-transformation",
   "applicationinsights",
   "appmesh",

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@cloud-copilot/iam-data",
-  "version": "0.19.202605011",
+  "version": "0.19.202605051",
   "description": "AWS IAM Data",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/cloud-copilot/iam-data.git"
   },
-  "updatedAt": "2026-05-01T05:50:49.457Z",
+  "updatedAt": "2026-05-05T05:32:53.542Z",
   "exports": {
     ".": {
       "import": "./dist/esm/index.js",